Cybersecurity Threat Hunter

Placements24; South Africa; Hybrid; ZAR 900,000 - 1,300,000; Full time

Benefits offered by this job

Health insurance

Professional development budget

Hybrid work environment

Access to security tools

Job summary

Placements24 seeks a proactive Cybersecurity Threat Hunter to join the client’s security operations center in Queenstown, SA. You will hunt for undetected threats, analyze SIEM/EDR data, and report findings with actionable recommendations to enhance detection capabilities.

The role requires 5+ years in cybersecurity with a focus on threat intelligence or SOC, plus a related degree and scripting skills in Python or PowerShell. A hybrid work setup and access to state-of-the-art tools are offered.

Qualifications

• Bachelor’s degree in cybersecurity or related field; significant relevant experience may substitute.
• At least 5 years in cybersecurity with threat intelligence or SOC focus.
• Experience with SIEM/EDR and threat hunting methodologies.
• Proficient in Python or PowerShell for data analysis.
• Strong analytical, problem-solving and investigative skills.

Responsibilities

• Proactively hunt for advanced threats using threat intelligence and data analytics.
• Develop hypotheses based on TTPs and apply to detection logic.
• Analyze large datasets from SIEM/EDR/network logs for IOCs.
• Document findings, report, and provide actionable mitigation recommendations.
• Collaborate with incident response to contain and eradicate threats.
• Stay current on threat landscapes and adversary TTPs.

Skills

Threat hunting

Threat intelligence

Incident response

Security operations

Python

PowerShell

Data analysis

Analytical thinking

Investigation

Education

Bachelor's degree in Cybersecurity, Computer Science, or related field

Tools

SIEM

EDR

Packet analysis tools

Job description

About the Role

Our client is looking for a proactive and highly analytical Cybersecurity Threat Hunter to join their security operations center in Queenstown. In this advanced role, you will be responsible for actively searching for undetected threats within the organization's network and systems, employing sophisticated techniques and intelligence. Your primary objective will be to identify, analyze, and report on potential security compromises before they can cause significant damage. This is a critical role in bolstering the organization's defenses against advanced persistent threats (APTs) and sophisticated adversaries.

Key Responsibilities

• Proactively hunt for advanced threats using threat intelligence, data analytics, and various security tools.
• Develop and implement hypotheses based on threat actor tactics, techniques, and procedures (TTPs).
• Analyze large datasets from various security sources (e.g., SIEM, EDR, network logs) to identify anomalies and indicators of compromise (IOCs).
• Document findings, create detailed reports, and provide actionable recommendations for threat mitigation and improved detection capabilities.
• Collaborate with incident response teams to contain and eradicate identified threats.
• Stay informed about the latest threat landscapes, attack vectors, and adversary TTPs.

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, or a related field; significant relevant experience may substitute for degree.
• Minimum of 5 years of experience in cybersecurity, with a strong focus on threat intelligence, incident response, or security operations.
• Proven experience in threat hunting methodologies and utilizing advanced security tools (e.g., SIEM, EDR, packet analysis tools).
• Deep understanding of threat actor TTPs, malware analysis, and forensic techniques.
• Proficiency in scripting languages (e.g., Python, PowerShell) for data analysis and automation.
• Excellent analytical, problem-solving, and investigative skills.

Benefits

• Highly competitive annual salary and performance-based incentives.
• Comprehensive health, dental, and vision insurance coverage.
• Significant budget for professional development, certifications, and attending industry conferences.
• A hybrid work environment offering flexibility.
• Access to state-of-the-art security tools and technologies.
• Challenging work with a team of dedicated cybersecurity professionals.